This policy explains how the LAPSE iOS app handles information. It also covers this website, which sets no cookies and loads no analytics, advertising or tracking scripts of any kind.
The short version: LAPSE has no user accounts and no server of its own. Your photographs, your journeys and everything you create in the app stay on your iPhone. We cannot see them, and we never receive them. The app does send anonymous analytics about which features are used, which you can switch off — section 5 says exactly what that covers.
1. Information we collect
We collect no personal information. There is no sign-up, no login, no email address, no name, no phone number and no advertising identifier. The app does not ask you who you are, and there is no account to create.
We do not operate a server that your photographs or journeys are sent to. There is nowhere for us to look at them, because there is nowhere for them to go.
The app does send anonymous product analytics — which features are used, not what you put in them. Section 5 sets out exactly what that is, what it can never include, and how to switch it off.
2. What is stored on your device
The app stores the following locally on your iPhone, inside its own private app container:
- Your photographs. Every check-in photo you take, and every photo you import from your library, is copied into the app's own storage.
- Your journeys — what you are tracking, what it is called, which shots each check-in takes, and the rhythm you chose.
- Your check-in history and the dates attached to it, including the original capture date read from any photo you import.
- The measurements the app takes from each photo so it can line the next one up — the position and size of the subject in the frame.
- App preferences, reminder settings and onboarding state.
These photographs are part of your iPhone backup. If you back up your iPhone to iCloud or to a computer, your LAPSE photographs are included in that backup, exactly as they would be for any other app's documents. That backup is between you and Apple — we have no access to it. The app tells you this in Settings, and it is deliberate: a record of months of your life should survive you getting a new phone.
None of this is transmitted to us or to anyone else. Deleting the app deletes all of it — there is no copy anywhere else, and nothing to request from us afterwards.
3. Device permissions and how they are used
LAPSE asks for permissions only at the moment it needs them, never at launch, and the app keeps working when you refuse.
- Camera. Asked for when you take your first photograph. The live camera feed is used for two things: showing you the viewfinder, and measuring the framing so the app can tell you when you match your reference. Those measurements happen on your device, in memory, using Apple's Vision framework. Frames the camera shows you are not recorded. Only the photograph you actually take is saved.
- Photo library (reading). Asked for only if you choose to import older photographs. The app receives the photos you pick and nothing else; it cannot browse your library.
- Photo library (adding). Asked for only if you export a transformation video and save it to Photos.
- Motion. Used to read the phone's tilt so the app can tell you when the angle matches your reference photo. It is not recorded and never leaves the device.
- Notifications. Used only for the check-in reminders you set up. You can turn any of them off, or refuse notifications entirely — the app still works, it just will not nudge you.
4. Purchases and subscriptions
LAPSE offers a subscription and a one-time unlock. Purchases are handled by Apple through the App Store and by Superwall, the service that presents the offer and tells the app whether you have access.
We never see your payment details. Apple does not give them to us. What the app receives back is the answer to one question: whether this installation currently has access.
Superwall processes data as part of showing you an offer and recording whether it was accepted — it is a third party with its own privacy policy, and it publishes its own privacy manifest describing what it collects. Your photographs and journeys are never part of that: they are not sent to Superwall, and Superwall has no way to reach them.
5. Analytics
Since 21 September 2026 the app sends anonymous product analytics through PostHog, to its US cloud. This is how we learn which parts of the app are worth keeping — nothing more.
What is sent: which kind of transformation you started, how far setup got, when a paywall was shown, whether a second check-in ever happened, and ordinary app-open and app-close events.
What is never sent, by design: your photographs, their file names, or anything read out of an image; the title you gave a journey; and any measurement, weight, due date or count you recorded. Those are the most personal things in the app, and a single file in the codebase is the only place that talks to PostHog, so there is one place to check rather than a promise spread over a hundred. Screen recording, session replay and automatic tap capture are all switched off.
How you are identified: by a random identifier generated on your device the first time you open the app. It is not your name, your email, your Apple ID or an advertising identifier, there is no account to attach it to, and deleting the app destroys it. Apple's definition of tracking means linking your data to data from other companies for advertising; we do none of that, and the app's privacy manifest declares analytics as product interaction, not linked to your identity and not used for tracking.
How to switch it off: open Settings in the app and turn off the analytics switch. It is on when you install the app. Turning it off stops collection and discards anything still waiting to be sent, rather than quietly flushing a last batch.
6. What we do not do
To be explicit, because "we value your privacy" is not a statement:
- No crash reporting, and no analytics beyond what section 5 describes. There is no crash reporter, no session recording, no screen recording and no automatic capture of what you tap.
- No tracking. No advertising identifier, no fingerprinting, no attribution, no cross-app or cross-site tracking. The app's privacy manifest declares this, and Apple holds us to it.
- No advertising, and no data sold or shared with data brokers.
- No cloud processing of your photographs. All image analysis runs on your iPhone. Nothing is uploaded for processing, and no photograph is sent to any AI service.
- No accounts, so nothing to breach and nothing to leak.
7. Children
LAPSE is not directed at children under 13, and we do not knowingly collect information from them. Since the app collects no personal information from anyone, there is nothing held about a child to delete — but if you believe a child has used the app in a way that concerns you, email us and we will help.
8. Your rights
Laws such as the GDPR and the CCPA give you rights over personal data a company holds about you: access, correction, deletion, portability.
We hold almost nothing. There is no account and no server of ours. Your photographs, journeys and measurements are on your iPhone, under your control: delete an individual journey inside the app, or delete the app to remove everything at once. We cannot return, correct or erase any of that, because we never had it.
The one exception is the analytics described in section 5: a record of which features were used, held by PostHog against the random identifier generated on your device. Being random and attached to nothing about you, it is not something we can look up from your name or email — which is the point of it, and also its limit. The controls that do work: turn the analytics switch off in Settings, and delete the app, which destroys the identifier so nothing further can ever be linked to your install. If you want events already collected deleted too, email us and we will work out together how to identify them.
For anything held by Apple about your purchase, or by Superwall about an offer you were shown, those companies act as the controller and their own policies and processes apply.
9. This website
This site is static pages. It sets no cookies, loads no analytics, no advertising and no third-party tracking scripts, and there is nothing to consent to. Our hosting provider keeps ordinary server logs — the kind every web server keeps — which may include an IP address and are used only to keep the site running and secure.
If that ever changes, this section changes with it before the code does.
10. Changes to this policy
If this policy changes, the date at the top of this page changes with it. Material changes will also be noted in the app's App Store release notes. We will not quietly start collecting something this page says we do not.
11. Contact
Questions about this policy, or about anything the app does with your photographs, go to sandi.peklaric@gmail.com.